diff options
author | Silvio Rhatto <rhatto@riseup.net> | 2013-04-05 15:38:08 -0300 |
---|---|---|
committer | Silvio Rhatto <rhatto@riseup.net> | 2013-04-05 15:38:08 -0300 |
commit | d1013475b2f21ea80a9f8bdb87e43f13bc275204 (patch) | |
tree | fe53c1435ee9ea66fb5ed12eae8f4a291e4a5cf8 /manifests/subsystems/firewall/redirect.pp | |
parent | 9025a40e886cf0b4b6187dfedac9badd613842f8 (diff) | |
download | puppet-nodo-d1013475b2f21ea80a9f8bdb87e43f13bc275204.tar.gz puppet-nodo-d1013475b2f21ea80a9f8bdb87e43f13bc275204.tar.bz2 |
Adding basic NAS class
Diffstat (limited to 'manifests/subsystems/firewall/redirect.pp')
-rw-r--r-- | manifests/subsystems/firewall/redirect.pp | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/manifests/subsystems/firewall/redirect.pp b/manifests/subsystems/firewall/redirect.pp new file mode 100644 index 0000000..7a9734a --- /dev/null +++ b/manifests/subsystems/firewall/redirect.pp @@ -0,0 +1,14 @@ +class firewall::redirect::ssh($destinationport) { + # When the box is in an internal network and we want to provide + # and external access through a shared real IP, we have to + # redirect requests coming from another port to port 22. + shorewall::rule { "ssh-redirect-1": + action => 'DNAT', + source => 'net', + destination => "fw:$ipaddress:22", + proto => 'tcp', + destinationport => $destinationport, + ratelimit => '-', + order => $destinationport, + } +} |